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DESCRIPTION 

INFORMATION PROCESSING METHOD, INFORMATION PROCESSING 
APPARATUS , PROGRAM, AND STORAGE MEDIUM 

5 TECHNICAL FIELD 

The present invention relates to an information 
processing apparatus for encrypting an image, an 
information processing method and information processing 
apparatus for decrypting an encrypted image, a program, and 
10 a storage medium. 

BACKGROUND ART 

Conventionally, entire image data undergoes 
encryption, scrambling, or the like to transfer image data 
15 or the like in secrecy. This is a technique for encrypting 
entire image data using an encryption key, and allowing only 
a party who has a decryption key corresponding to the 
encryption key to normally decrypt the encrypted image 
data. 

20 Especially, image data having a hierarchical 

structure undergoes an encryption process using different 
encryption keys for respective layers for the purpose of 
controlling reproduction of the image data in 
correspondence with the hierarchical structure. Also, 

25 image data made up of a plurality of tiles undergoes an 
encryption process using different encryption keys for 
respective tiles for the purpose of controlling 



WO 2004/004198 



PCT/JF2003/007976 



- 3 - 

image, the low-resolution components are decrypted using 
the key corresponding to the low-resolution components, and 
the high-resolution components remain encrypted. In such 
case, image data obtained by multiplexing noise data of the 

5 high-resolution component on the image data of the 
low-resolution components is reproduced, and the 
low-resolution image cannot be browsed without being 
multiplexed with the noise data. 

When image data is encrypted using different 

10 encryption keys for respective tiles and layers, there is 
no means for determining correspondence between encrypted 
predetermined tiles and layers, and decryption keys 
required to decrypt them. For this reason, a decryption 
process cannot often be normally made. Likewise, when some 

15 tiles or layers of image data are encrypted, it is difficult 
to discriminate encrypted tiles and layers from those which 
are not encrypted, and a decryption process cannot often 
be normally made. 

The present invention has been made in consideration 

20 of the above problems, and has as its object to allow easy 
management of keys used in encryption. 

DISCLOSURE OF INVENTION 
In order to achieve the above object, for example, 
25 an information processing method of the present invention 
comprises the following arrangement. 
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first recognition means for recognizing a first unit 
n (n = 1 to N) which specifies segmentation of encoded image 
data; 

second recognition means for recognizing a second 
5 unit m (m = 1 to M) which specifies segmentation of encoded 
image data; 

first parameter generation means for generating a 
first parameter X n (n = 1 to N) on the basis of the first 
unit n; and 

10 key parameter generation means for generating a key 

parameter corresponding to each combination (n, m) of the 
first and second units on the basis of at least the first 
parameter, and 

in that the key parameter is used to encrypt or decrypt 

15 partial encoded image data D(n, m) corresponding to the 
combination (n, m) in the encoded image data, and 

the first parameter generation means generates each 
first parameter X n on the basis of an algorithm which 
uniquely determines the first parameter X n based on a 

20 neighboring first parameter X n -i- 

Other features and advantages of the present 
invention will be apparent from the following description 
taken in conjunction with the accompanying drawings, in 
which like reference characters designate the same or 
25 similar parts throughout the figures thereof. 



BRIEF DESCRIPTION OF DRAWINGS 
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Fig. 6 is a flow chart of a key generation process 
executed by a key generation unit 12 according to the first 
embodiment of the present invention; 

Fig. 7 shows an example of three tiles (T01, T02, and 
5 T03) which are respectively segmented into different 
numbers of bit streams; 

Fig. 8 is a view for explaining an example of a key 
ID generation method; 

Fig. 9 shows an example of keys and key IDs 
10 corresponding to respective tiles and respective 

resolution levels of each tile when an image is made up of 
four tiles f tile 01 is made up of three resolution levels, 
tile 02 is made up of two resolution levels, tile 03 is made 
up of three resolution levels, and tile 04 is made up of 
15 four resolution levels; 

Fig. 10 shows an example of the format of an ID 
reference table according to the first embodiment of the 
present invention; 

Fig. 11 is a block diagram showing the functional 
20 arrangement of a decryption apparatus (decryption system) 
according to the first embodiment of the present inventions- 
Fig. 12 is a block diagram showing the functional 
arrangement of a second key generation unit 123 according 
to the first embodiment of the present invention; 
25 Fig. 13 is a flow chart of a key generation process 

executed by the key generation unit 12 according to the 
second embodiment of the present invention; 
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Fig. 21 is a view showing the flow of sequentially 
decrypting a given region of a subband to be decrypted for 
respective bit planes and finally reconstructing 
quantization indices; 
5 Fig. 22A is a block diagram showing the arrangement 

and process of an inverse discrete wavelet transformer 214; 

Fig. 22B is a block diagram showing the arrangement 
and process of an inverse discrete wavelet transformer 214; 

Fig. 23A shows an example of a code sequence; 
10 Fig. 23B shows correspondence between respective 

subbands and the sizes of tiles to be displayed; 

Fig. 24 shows an example wherein an image is made up 
of four tiles , and each tile has three resolution levels; 
and 

15 Fig. 25 shows the format of a code sequence in which 

bit planes are arranged in the order from an upper bit plane 
to a lower bit plane, and each bit plane contains bitstreams 
of respective subbands. 

20 BEST MODE FOR CARRYING OUT THE INVENTION 

Preferred embodiments of the present invention will 

now be described in detail in accordance with the 

accompanying drawings. 

[First Embodiment] 
25 An encryption apparatus according to this embodiment 

for encrypting an image , and a decryption apparatus for 
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encoding unit 11 according to this embodiment comprises an 
image input unit 21, tile segmentation unit 22 , discrete 
wavelet transformer 23 , quantizer 24 f entropy encoder 25 , 
and code output unit 26. 
5 Pixel signals which form an image to be encoded are 

input to the image input unit 21 in the raster scan order, 
and the output from the image input unit 21 is input to the 
tile segmentation unit 22. In the following description, 
an image signal expresses a monochrome multi-valued image. 

10 However, when a plurality of color components of, e.g., a 
color image or the like are to be encoded, each of R, G, 
and B color components or each of luminance and chromaticity 
components may be compressed as the monochrome component . 
The tile segmentation unit 22 segments the input 

15 image signal into at least one tile having a predetermined 
size, and outputs the segmented tile or tiles. Note that 
the tiles indicate rectangular regions which do not overlap 
each other, and the subsequent processes are independently 
executed for each tile. 

20 The discrete wavelet transformer 23 executes a 

two-dimensional wavelet transformation process for the 
input image signal, and computes and outputs transform 
coefficients. Fig. 3A shows the basic arrangement of the 
discrete wavelet transformer 23. An input image signal is 

25 stored in a memory 31, is sequentially read out by a 

processor 32 to undergo the transformation process, and is 
written in the memory 31 again. In this embodiment, Fig. 3B 
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The quantizer 24 quantizes the input coefficients by 
a predetermined quantization coefficient, and outputs 
indices corresponding to the quantized values. In this 
case, quantization is described by: 
5 q = sign(c) f loor (abs (c) /A) (3) 

sign(c) = 1; c > 0 (4) 
sign(c) = -1; c < 0 (5) 
where c is a coefficient to be quantized. In this 
embodiment, the value A includes "1". When A = 1, no 
10 quantization is done in practice, and subbands input to the 
quantizer 24 are directly output to the entropy encoder 25. 

The entropy encoder 25 decomposes the input 
quantization indices into bit planes, executes binary 
arithmetic coding for respective bit planes, and outputs 
15 a code stream. 

Fig. 4 is a view for explaining the operation of the 
entropy encoder 25. In this example, a 4 x 4 code block 
region includes three nonzero quantization indices, which 
respectively have values "+13", "-6", and "+3". The 
20 entropy encoder 25 scans this region to obtain a maximum 
value M, and computes the number S of bits required for 
expressing the maximum quantization index by: 

S = ceil (log2 (abs (M) ) ) (6) 
where ceil (x) is the smallest one of integers equal to or 
25 larger than x. In Fig. 4, since the maximum value is "13", 
S - 4. Hence, 16 quantization indices in the sequence are 
processed for respective four bit planes, as shown in the 
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the like) to the key generation unit 12. P represents the 
encoding parameters input to the key generation unit 12 . 

Figs. 5A, 5B, 5C, and 5D show the format of the code 
sequence which is generated and output in this way. Fig. 5A 
5 shows the overall format of the code sequence, in which MH 
is a main header; TH, a tile header; and BS, a bitstream. 
As shown in Fig. 5B, main header MH is comprised of the size 
(the numbers of pixels in. the horizontal and vertical 
directions) of an image to be encoded, the size of each tile 

10 upon breaking up the image into tiles as a plurality of 
rectangular regions, the number of components indicating 
the number of color components, the size of each component, 
and component information indicating bit precision. 

Fig. 5C shows the format of tile header TH. Tile 

15 header TH consists of a tile length including the bitstream 
length and header length of the tile of interest, and an 
encoding parameter for the tile of interest. The encoding 
parameter includes a discrete wavelet transformation level, 
filter type, and the like. Fig. 5D shows the format of 

20 bitstream BS of each tile. In Fig. 5D, a bitstream is 

formed for respective subbands, which are arranged in turn 
from a subband having a low resolution in ascending order 
of resolution. Furthermore, in each subband, codes are set 
for respective bit planes, i.e. , in the order from an upper 

25 bit plane (MSB) to a lower bit plane (LSB) . With this code 
arrangement, hierarchical decoding corresponding to 
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contains those of HL2, LH2, and HH2 subbands, and bitst ream 
BS01 contains those of HL1, LH1, and HH1 subbands) . 

Therefore / when BS03 is decoded, a low-resolution 
image can be reproduced. When BS02 is decoded in turn, an 
5 image having a higher resolution can be reproduced. When 
BS01 is decoded finally, an image having the highest 
resolution can be reproduced. Note that a numeral that 
follows BS indicates a resolution index. 

In Fig. 7, reference numeral 82 denotes an example 

10 in which the bitstream which forms tile T02 is segmented 
into three bitstreams as in T01 but another segmentation 
method is adopted. Furthermore, reference numeral 83 in 
Fig. 7 denotes an example in which tile T03 is segmented 
into two bitstreams. As described above, different 

15 bitstream segmentation methods can be independently set for 
respective tiles. The aforementioned segmentation 
process may be explicitly designated by the user or may be 
automatically designated using the number of bitstreams to 
be segmented, which is determined in advance. 

20 The description will revert to Fig. 6. Upon 

completion of the bitstream segmentation process of 
respective tiles, image key K_I is generated (step S71) . 
Image key K__I is the only one key for one image. Hence, 
in this embodiment, image key K_I is a key for the image 

25 to be encoded input to the image input unit 21. The 

generated image key K_I is saved together with a key ID which 
is also generated in step S71. The key ID is an index 
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Variable j is initialized to 1 (step S75) . Variable 
j is a resolution index indicating each segmented bitstream 
described above. The resolution is higher with decreasing 
j, and vice versa. 
5 In tile Ti, a key for a segmented bitstream indicating 

each resolution is generated (step S7 6) . More 
specifically, key KJTiSj of resolution j is generated from 
key K_Ti of tile Ti. For example, key KJTiSj is generated 
using : 

10 If j = 1, KJTiSj = KJTi 

If j * 1, KJTiSj = H (KJTiSj - 1) (9) 
The generated resolution key KJTiSj is saved together 
with a key ID which is also generated in step S7 6. 

It is then checked if variable j < variable N_i (step 

15 S77) . Note that parameter ISJi is the number of segmented 
bitstreams which form tile Ti. That is, it is determined 
whether or not resolution keys KJTiSj corresponding to all 
(segmented) bitstreams which form tile Ti have been 
generated. If the checking result is true, the flow 

20 advances to step S7 8 to increment variable j by 1. Then, 
the aforementioned process in step S7 6 is executed using 
incremented variable j . On the other hand, if the checking 
result in step S77 is false , the flow advances to step S7 9 
to check if variable i < parameter M. Note that parameter 

25 M indicates the total number of tiles. That is, it is 
determined whether or not tile keys KJTi corresponding to 
all the tiles have been generated. If the checking result 



WO 2004/004198 



PCT/JIP2003/007976 



- 21 - 

three resolution levels, tile 02 is made up of two 
resolution levels, tile 03 is made up of three resolution 
levels, and tile 04 is made up of four resolution levels. 

In step S71 above, image key K_IMG and its key ID 

5 "0000" are generated. In step S72 above, bitstream key K_BS 
and its key ID "0001" are generated. In step S74, tile key 
K_T1 and its key ID "0100", tile key K_T2 and its key ID 
"0200", tile key KJT3 and its key ID "0300", and tile key 
K_T4 and its key ID "0400" are generated. In step S76, 

10 resolution keys and their key IDs for respective 

resolutions of each tile are generated. Taking tile 1 as 
an example, resolution key K1S1 and its key ID "0101", 
resolution key K1S2 and its key ID "0102", and resolution 
key K1S3 and its key ID "0103" are generated. 

15 In practice, since each tile key is equal to a 

resolution key of the highest resolution in each tile (for 
example, in case of tile 1, K_T1 and KJT1S1) , the tile key 
or the resolution key of the highest resolution may be 
omitted. Furthermore, in this embodiment, the keys and key 

20 IDs have been independently explained for the sake of 

simplicity. However, in practice, pairs of keys and key 
IDs in this embodiment can be handled as keys required for 
decryption. 

The aforementioned key ID is used to specify a tile 
25 and resolution level encrypted by the key corresponding to 
it. However, the location of the corresponding tile and 
resolution level in a bitstream cannot be determined from 
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The ID reference table generated using the 
aforementioned process must be transmitted to a decryption 
apparatus (to be described later) by a secure method. For 
example, the ID reference table may be encrypted or signed, 

5 and may be embedded in a code sequence. This is because 
if the ID reference table has been tampered with, a 
decryption process cannot be normally executed. 

Furthermore, all the keys and key IDs shown in Fig. 9 
need not always be saved and securely transmitted to the 

10 decryption apparatus. That is, of the keys shown in Fig . 9, 
only image key K_IMG is securely saved. Upon decryption, 
a key corresponding to a bitstream which is permitted to 
be decrypted may be generated from image key K_IMG, and only 
the generated key may be securely transmitted. In this way, 

15 only one key need be securely saved and managed for each 
image data, and such method is effective in terms of 
management and efficiency. Details of generation of a key- 
required for decryption will be described later. 

The process to be executed by the code sequence 

20 encryption processing unit 13 will be described below. The 
code sequence encryption processing unit 13 receives the 
code sequence, keys generated by the previous key 
generation process, and ID reference table. The unit 13 
executes an encryption process of the code sequence using 

25 the keys and ID reference table, and outputs an encrypted 
code sequence. More specifically, the location of a 
bitstream to be encrypted in the code sequence is specified 
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unit 13 may be integrated- In this case, the encryption 
process is executed every time each resolution key is 
generated. That is, the encryption process may be executed 
simultaneously with generation of a resolution key in step 
5 S76. 

<Decryption Apparatus (Decryption System) > 

Fig. 11 is a block diagram showing the functional 
arrangement of a decryption apparatus (decryption system) 
according to this embodiment. As shown in Fig. 11, the 

10 decryption apparatus according to this embodiment 

comprises a first key generation unit 121, network unit 122, 
second key generation unit 123, code sequence decryption 
unit 124, and image decoding unit 125. Note that the 
network unit 122 may be omitted. In such case, the 

15 decryption apparatus comprises the first key generation 
unit 121, second key generation unit 123, code sequence 
decryption unit 124 , and image decoding unit 125 . Note that 
the decryption process to be described below may be executed 
by a computer which loads software with this arrangement 

20 (computer program) . In this case, Fig. 11 corresponds to 
a block diagram that shows the functional arrangement of 
a program that makes a computer execute the decryption 
process according to this embodiment . 

The process to be executed by the first key generation 

25 unit 121 will be described first. The first key generation 
unit 121 receives image key K__IMG and encoding parameters 
P. The unit 121 generates and outputs a key and key ID 
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from the generated tile key, and only the generated 
resolution key and its key ID are output. 

As described above, a key and key ID corresponding 
to a bitstream to be decrypted are generated using the first 
5 key generation unit 121, and the generated key and key ID 
must be securely transmitted to the subsequent second key 
generation unit 123 via the network unit 122 (directly to 
the second key generation unit 123 if the network unit 122 
is omitted) . 

10 The process executed by the second key generation 

unit 123 will be described below . The second key generation 
unit 123 receives the key and key ID output from the 
aforementioned first key generation unit, generates a 
decryption key corresponding to a bitstream to be decrypted 

15 by the code sequence decryption unit 124 (to be described 
later) , and outputs the generated decryption key. In some 
cases, a plurality of decryption keys may be generated. A 
second key generation process executed by the second key 
generation unit 123 is basically the same as the key 

20 generation process that has been explained using Fig. 6. 
However, the second key generation unit 123 generates 
another key and key ID to have the key and key ID input to 
it as a start point in place of generating them to have image 
key K_IMG as a start point unlike in the key generation 

25 process that has been explained using Fig. 6. 

The second key generation process will be described 
in detail below using Fig. 12. Fig. 12 is a block diagram 
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resolutions lower than the resolution level of that key can 
be generated. A case wherein the key ID does not include 
"00" will be referred to as "case D" hereinafter. 

The arithmetic unit 132 makes the arithmetic 
5 operation for the input key on the basis of the 

determination result, thereby generating keys that can be 
generated . 

For example, in case A, keys are generated by the same 
process as that in step S72 and subsequent steps in the 
10 method shown in Fig. 6. In case B, keys are generated by 
the same process as that in step S73 and subsequent steps 
in the method shown in Fig. 6. In case C, keys are generated 
by the same process as that in steps S75 to S78 in the method 
shown in Fig. 6. In case D, after the initial value of j 
15 is set to be equal to the resolution index included in the 
input key ID in step S7 5, keys are then generated by the 
same process as that in steps S75 to S78. 

As described above, the second key generation unit 
determines keys that can be generated from the key input 
20 from the first key generation unit using the key ID input 
from the first key generation unit, and can generate keys 
and key IDs used in decryption by executing the arithmetic 
processes on the basis of the determination result. 

The process executed by the code sequence decryption 
25 unit 124 will be described below. The code sequence 

decryption unit 124 receives keys generated by the second 
key generation unit, and the encrypted code sequence, and 
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The code input unit 211 receives the decrypted code 
sequence, analyzes the header included in that sequence to 
extract parameters required for the subsequent processes, 
and controls the flow of processes if necessary or outputs 
5 required parameters to the subsequent processing units. 
The bitstream included in the code sequence is output to 
the tile segmentation unit 216, 

The tile segmentation unit 216 segments the input 
bitstream into those corresponding to tiles, and outputs 
10 the segmented bitstreams. The tile segmentation process 
is executed with reference to the main header, tile header, 
and the like- After the tile segmentation process, 
individual bitstreams are output to the entropy decoder 212 . 
Note that the subsequent processes are independently 
15 executed for each bitstream obtained by the tile 
segmentation process . 

The entropy decoder 212 decodes and outputs the 
bitstreams for respective bit planes. Fig. 21 shows the 
decoding sequence at that time. Fig. 21 illustrates the 
20 flow for sequentially decoding one subband region to be 
decoded for respective bit planes to finally restore a 
quantization index, and bit planes are decoded in the order 
of an arrow in Fig. 21. The restored quantization indices 
are output to dequantizer 213. 
25 The dequantizer 213 reclaims discrete wavelet 

transform coefficients from the input quantization indices 
by: 
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Note that the forward and inverse discrete wavelet 
transformation processes given by equations (1), (2), (12), 
and (13) satisfy a perfect reconstruction condition. 
Hence, since the quantization step A = 1 in this embodiment, 

5 the restored image signal x' matches an original image 
signal x if all bit planes are decoded in bit plane decoding. 

With the aforementioned process, an image signal is 
reclaimed and is output to the image output unit 215. Note 
that the image output unit 215 may be an image display device 

10 such as a monitor or the like, or may be a storage device 
such as a magnetic disk or the like. 

The image display pattern upon restoring and 
displaying an image in the aforementioned sequence will be 
explained using Figs. 23A and 23B. Fig. 23A shows an 

15 example of a code sequence, the basic format of which is 
based on Figs . 5A, 5B, 5C, and 5D. Since an image is made 
up of a plurality of tiles, the code sequence contains a 
plurality of tile headers and bitstreams . In bitstream BS0 , 
codes are set in turn from LL as a subband corresponding 

20 to the lowest resolution in ascending order of resolution, 
as shown in Fig. 23A. 

The image decoding unit 125 sequentially reads this 
bitstream, and displays an image upon completion of 
decoding of codes of each bit plane. Fig. 23B shows 

25 correspondence between respective subbands, and the sizes 
of images to be displayed. In this example, two levels of 
two-dimensional discrete wavelet transformation processes 
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Note that this embodiment adopts the format shown in 
Fig. 5D as that of the bitstream of each tile. This 
embodiment adopts such format since the respective 
segmented bitstreams have different resolutions. 
5 Alternatively, the respective segmented bitstreams may 
have different image qualities. In this case, the 
bitstream may have a format in which bit planes are arranged 
in the order from upper to lower bit planes, and each bit 
plane contains bitstreams of respective subbands, as shown 

10 in Fig. 25. 

Also, when bitstreams for respective bit planes are 
formed in a bitstream of each tile, and bitstreams for 
respective subbands are formed in the bitstream of each bit 
plane, a hierarchical structure based on spatial positions 

15 of an image can be realized. 

In addition, a hierarchical structure based on 
luminance components or color components of an image may 
be realized. 
[Second Embodiment] 

20 In the first embodiment, key generation is done in 

favor of tiles. That is, when a tile key is used in 
decryption, all resolution levels of that tile can be 
decrypted. However, the present invention is not limited 
to such specific process, and key generation may be done 

25 in favor of resolutions. That is, when a resolution key 
is used in decryption, all tiles of that resolution level 
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it is determined whether or not tile keys K_TjSi 
corresponding to all tiles of resolution i have been 
generated- If the checking result is true, the flow 
advances to step S14 8 to increment variable j by 1 (step 

5 S148), and the process in step S146 is executed. On the 
other hand, if the checking result in step S147 is false, 
the flow advances to step S149 to check if variable i < 
parameter N (step S149) . Note that parameter N is the 
number of resolution levels. That is, it is determined 

10 whether or not resolution keys K__Si corresponding to all 
resolution levels have been generated. If the checking 
result is true, the flow advances to step S1410, and the 
processes in step S14 4 and subsequent steps are executed. 
On the other hand, if the checking result is false, the 

15 process ends. 

A set of keys and key IDs generated by the 
aforementioned process will be described below using 
Fig. 24. Fig. 24 shows an example wherein an image is made 
up of four tiles, and each tile has three resolution levels. 

20 In step S141, image key K_IMG and its key ID "0000" 

are generated. In step S142, bitstream key K_BS and its 
key ID "0001" are generated. In step S144, resolution key 
K__S1 and its key ID "0001", resolution key K_S2 and its key 
ID "0002", and resolution key K_S3 and its key ID "0003" 

25 are generated. In practice, since bitstream key K_BS is 
equal to resolution key K_S1 of the highest resolution, the 
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bitstreams in a code sequence may be encrypted using only 
one encryption key. 

Note that the predetermined bitstreams mean those 
corresponding to predetermined tiles , those corresponding 
5 to predetermined subbands, predetermined bit planes (or a 
layer as a set of some bit planes ) , or the like . For example , 
by encrypting only bitstreams corresponding to 
predetermined tiles , decryption control based on the 
spatial positions of an image can be implemented- Also, 

10 by encrypting only bitstreams corresponding to 

predetermined subbands, decryption control based on the 
frequency components of an image can be implemented. 
Furthermore, by encrypting only predetermined bit planes 
(or a layer as a set of some bit planes) , decryption control 

15 based on the image qualities of an image can be implemented. 

When only predetermined bitstreams in a code sequence 
are encrypted using only one key, as described above, a 
plurality of keys need not be used, but decryption requires 
information indicating whether or not bitstreams in the 

20 code sequence have been encrypted. As such information, 
the ID reference table shown in Fig. 10 may be modified and 
used. In this embodiment, information indicating 
encrypted bitstreams in a code sequence will be referred 
to as an encryption map. The encryption map will be 

25 described below using Figs. 14A, 14B, and 14C. 

Fig. 14A shows encrypted predetermined bitstreams 
(halftone dot portions) in a code sequence which has a start 
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since the code sequence has already been encrypted, an 
encryption process is skipped. On the other hand, if an 
encryption map is not included (false in step S161) , the 
flow advances to step S162 . In step S161, if the encryption 

5 map has been encrypted, a decryption process is executed. 
Furthermore, if the encryption map has been signed, a 
signature verification process is executed. For example, 
even when the encryption map is found, if a signature is 
not verified normally, the process ends. 

10 On the other hand, predetermined bitstreams to be 

encrypted in the code sequence are determined, and an 
encryption map is generated and saved based on the 
determined contents (step SI 62) . Note that the 
predetermined bitstreams to be encrypted may be explicitly 

15 designated by the user or may be automatically selected. 
Then, the predetermined bitstreams in the code sequence are 
encrypted on the basis of the generated encryption map (step 
S163) . 

With the aforementioned process, the encryption map 
20 can be generated while preventing double encryption, and 
an encryption process can be executed. 

The decryption process of this embodiment will be 
described below. The decryption process of this 
embodiment is executed by the decryption apparatus with the 
25 arrangement shown in Fig. 11 . In this embodiment, however, 
the first key generation unit 121, network unit 122, and 
second key generation unit 123 are not always required, and 
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However, if the decryption process is not normally 
terminated due to, e.g., use of a wrong key or the like, 
the record of this bit stream may be left unerased. 

It is then checked if variable i < variable A (step 

5 S175) . Note that variable A is the total number of 

encrypted bit streams in the code sequence. For example, 
in the example shown in Fig. 14A, A = "3". That is, it is 
determined in step S175 whether or not all bitstreams have 
been decrypted. If the checking result is true, the flow 

10 advances to step S17 6 to increment variable i by 1, and the 
processes in step S173 and subsequent steps are executed. 
On the other hand, if the checking result is false, the 
process ends . 

With the above process, the decryption process can 

15 be executed while preventing double decryption. 

Note that the encryption map may be compressed to 
allow its efficient recording or transmission. 
Furthermore, when the encryption map of this embodiment is 
used, image decoding processes of some encrypted bitstreams 

20 may be skipped using the method described in the second 
embodiment . 

In the encryption process, various bitstreams (e.g. , 
bitstreams in respective layer levels) in a code sequence 
may be encrypted using a plurality of different keys as in 
25 the first and second embodiments. 
[Fourth Embodiment] 
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In this embodiment, the encryption map must be 
securely transmitted from the encryption apparatus to the 
decryption apparatus. For this purpose, the encryption 
apparatus may encrypt the encryption map, and the 
5 decryption apparatus may decrypt it. Alternatively, the 
encryption apparatus may encrypt the encryption map, and 
the decryption apparatus may verify it. 

Note that the encryption map may be compressed to 
allow its efficient recording or transmission. 

10 Furthermore, when the encryption map of this embodiment is 
used, image decoding processes of some encrypted bitstreams 
may be skipped using the method described in the second 
embodiment . 
[Fifth Embodiment] 

15 In the above embodiments, the decryption process is 

executed with reference to the ID reference table (or 
encryption map) . In this case, a record corresponding to 
a portion that has undergone the decryption process may be 
erased from the ID reference table (or encryption map) . By 

20 erasing records, it is determined by checking only the ID 
reference table (or encryption map) that portions which 
have records in the ID reference table (or encryption map) 
are encrypted, while portions which do not have any record 
in the ID reference table (or encryption map) are not 

25 encrypted. 

Note that such process can be executed only when the 
ID reference table (or encryption map) is securely 
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signal having low-frequency components. This may pose a 
problem when the use wants to "clearly browse a 
low-resolution image (without any noise)". Hence, the 
aforementioned technique that skips an image decoding 
5 process of an encrypted bitstream is effective in such case . 

Fig. 18 is a block diagram showing the functional 
arrangement of a decryption apparatus (decryption system) 
according to this embodiment. The decryption apparatus 
(decryption system) shown in Fig. 18 comprises a first key 
10 generation unit 191, network unit 192, second key 

generation unit 193, code sequence decryption unit 194, 
control unit 195, and image decoding unit 196. Note that 
the network unit 192 may be omitted. In this case, the 
decryption apparatus comprises the first key generation 
15 unit 191, second key generation unit 193, code sequence 
decryption unit 194, control unit 195, and image decoding 
unit 196. Note that the first key generation unit 191, 
network unit 192, second key generation unit 193, code 
sequence decryption unit 194, and image decoding unit 196 
20 in Fig. 18 make the same operations as those of the first 
key generation unit 121, network unit 122, second key 
generation unit 123, code sequence decryption unit 124, and 
image decoding unit 125, and a description thereof will be 
omitted. The control unit 195 will be described below. 
25 Fig. 19 is a block diagram showing the functional 

arrangement of the control unit 195 according to this 
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control unit 201, and outputs only non-encrypted bitstreams 
or packets in the entire code sequence in accordance with 
the information associated with bitstreams or packets. 

As described above, whether or not each bit stream or 
5 packet is encrypted is determined using the ID reference 
table or encryption map, and only non-encrypted bitstreams 
or packets are decoded. Hence, the user can browse a 
permitted image free from noise. 

[Another Embodiment] ^ 
10 The objects of the present invention are also 

achieved by supplying a recording medium (or storage 
medium) , which records a program code of a software program 
that can implement the functions of the above-mentioned 
embodiments to the system or apparatus, and reading out and 
15 executing the program code stored in the recording medium 
by a computer (or a CPU or MPU) of the system or apparatus. 
In this case, the program code itself read out from the 
recording medium implements the functions of the 
above-mentioned embodiments, and the recording medium 
20 which stores the program code constitutes the present 
invention. 

The functions of the above-mentioned embodiments may 
be implemented not only by executing the readout program 
code by the computer but also by some or all of actual 
25 processing operations executed by an operating system (OS) 
running on the computer on the basis of an instruction of 
the program code. 
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CLAIMS 

1. An information processing method characterized 
by comprising: 

a first recognition step of recognizing a first unit 

5 n (n = 1 to N) which specifies segmentation of encoded image 
data; 

a second recognition step of recognizing a second 
unit m (m = 1 to M) which specifies segmentation of encoded 
image data; 

10 a first parameter generation step of generating a 

first parameter X n (n = 1 to N) on the basis of the first 
unit n; and 

a key parameter generation step of generating a key 
parameter corresponding to each combination (n, m) of the 
15 first and second units on the basis of at least the first 
parameter, and 

in that the key parameter is used to encrypt or decrypt 
partial encoded image data D(n, m) corresponding to the 
combination (n, m) in the encoded image data, and 
20 the first parameter generation step includes a step 

of generating each first parameter X n on the basis of an 
algorithm which uniquely determines the first parameter X n 
based on a neighboring first parameter X n -i. 

25 2. The method according to claim 1, characterized 

in that an image expressed by the encoded image data is made 
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9. An information processing apparatus 

characterized by comprising: 

first recognition means for recognizing a first unit 

5 n (n = 1 to N) which specifies segmentation of encoded image 
data; 

second recognition means for recognizing a second 
unit m (m = 1 to M) which specifies segmentation of encoded 
image data; 

10 first parameter generation means for generating a 

first parameter X n (n = 1 to N) on the basis of the first 
unit n; and 

key parameter generation means for generating a key 
parameter corresponding to each combination (n, m) of the 

15 first and second units on the basis of at least the first 
parameter , and 

in that the key parameter is used to encrypt or decrypt 
partial encoded image data D(n, m) corresponding to the 
combination (n, m) in the encoded image data, and 

20 said first parameter generation means generates each 

first parameter X n on the basis of an algorithm which 
uniquely determines the first parameter X n based on a 
neighboring first parameter X n -i- 

25 10. A program for making a computer execute an 

information processing method of claim 1. 
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